Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2309/3GiS42IN0PH9YpguEY4pdX3Iyz0.mft
File: 3GiS42IN0PH9YpguEY4pdX3Iyz0.mft (raw, json)
Hash identifier: ZlIofaOuY32+Ka5GCtqX4wcMiUR1Ovpk3xzc0JlpPYs=
Subject key identifier: AE:C4:B3:39:17:81:4B:C0:0A:65:EB:9C:EC:3E:1D:FD:8D:38:30:10
Authority key identifier: DC:68:92:E3:62:0D:D0:F1:FD:62:98:2E:11:8E:29:75:7D:C8:CB:3D
Certificate issuer: /CN=DC6892E3620DD0F1FD62982E118E29757DC8CB3D
Certificate serial: 1793
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3GiS42IN0PH9YpguEY4pdX3Iyz0.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/3GiS42IN0PH9YpguEY4pdX3Iyz0.mft
Manifest number: 1729
Signing time: Sat 23 Aug 2025 06:02:46 +0000
Manifest this update: Sat 23 Aug 2025 06:02:46 +0000
Manifest next update: Sat 23 Aug 2025 12:02:46 +0000
Files and hashes: 1: 2n9wS1M7syH7x5xe_mVyu3n8ym0.roa (hash: bjySGr8ntkqnZeQot/ZGyf/Ph80Ivr4s9McXO3XAliI=)
2: 3GiS42IN0PH9YpguEY4pdX3Iyz0.crl (hash: JX03ShnkIiVPVVT/dnG4L5aMWoudPypa2paOAqE6KtE=)
3: 8bIf5okmvQcgZEFb1zMEtioo9Bo.roa (hash: WeqdQC4BErrU6tuOjQZRZJ8aznqsoiTS20wXvnYplR4=)
4: CsbL2zc06qlI5qiGhv8iWDSiHpo.roa (hash: WRx0mQaFMO/zcpfEjAPiBz7zQ4TDgEAoJmPOhrxqLqM=)
5: DLh317d13UWo5fd34N6-2Qm0P1Q.roa (hash: npIp+JCP+LubbpwNdo0aDF8nf8uL3RjKYIP9e8mDjgU=)
6: GzAP2avY_CVkjzL-5ENvc4ng1q4.roa (hash: eb/EnvkdTSlL/AQOxQFE8DanViGWE8idIcezhVAx8kA=)
7: U4oQnHmqzev6Gj7VQCG9Vg1IGKc.roa (hash: ljZleBf1aFuqSDR+p0LmN1murZ6t7/ag946nBUiY8mc=)
8: XhUoeoz9VJqqIq46N3RDeT_yZEE.roa (hash: tXItQfPXQIdUmohhpDIXLj/1/DGqLBI7gNct3iexofo=)
9: aGbshMTCsokWooKVA9PeMNUJ-G8.roa (hash: 16o5mskag/BXbkBmolzej0Dyn4GYuPSqvKt9AV5x/D8=)
10: cHRo-hr5vmKf2efQVzb9SlGhKUA.roa (hash: p4BukhfF7uVeCeNM7A4KiU5uirEPzlriOAbTujzkRV0=)
11: gFQ0V21vJzULIhAjNC22HYqbNls.roa (hash: wsQ65k8e4WOz3445/AQgq5MBeH/Q0sqHWQ6ayG0tSGI=)
12: qedhA0bOyAoTgXRIgruj8mqK0ZA.roa (hash: vcTv5onryYbmeDdxkNmK6VVWOUllVzdo9t8eDYksb1g=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6035 (0x1793)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DC6892E3620DD0F1FD62982E118E29757DC8CB3D
Validity
Not Before: Aug 23 06:02:46 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=AEC4B33917814BC00A65EB9CEC3E1DFD8D383010
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:eb:79:0f:fa:67:80:fa:5d:2e:95:a1:98:8c:
49:15:6b:7c:b6:6b:21:fc:03:e9:69:75:27:1f:63:
35:4e:93:f0:74:1c:93:1e:dd:35:8e:2f:e5:d6:40:
1b:5f:12:fd:cc:78:a9:5b:c2:74:89:e7:af:f8:c3:
18:e2:d3:e7:b8:0d:c6:63:2d:ca:c4:ca:b4:6b:ea:
4b:54:e6:6d:a9:02:d4:74:c0:a8:da:2a:a6:de:d8:
0e:b3:9b:c2:ed:0f:e9:68:f6:09:f8:41:6a:7a:4d:
56:b3:8a:db:e0:be:ad:fb:85:b1:e0:0b:88:d3:bb:
26:1d:48:96:09:cb:ee:cb:6f:14:5f:4d:dd:fc:ec:
98:94:32:8e:8e:00:de:15:eb:d0:3a:2d:55:cf:a9:
09:2a:8d:5a:08:1e:1a:72:cd:b9:cc:49:e9:79:22:
61:c1:79:56:2b:1f:15:2b:20:d5:96:30:be:1e:d1:
92:11:20:52:24:3a:e4:c1:6b:a0:3d:4d:76:f9:6e:
d9:94:40:f7:43:58:86:f3:2d:ca:8d:97:13:23:18:
9a:8f:af:c2:b3:83:40:46:86:39:f9:3a:11:4d:b5:
41:56:73:5c:54:d9:44:1c:4e:72:d5:5f:8a:34:63:
31:84:47:5d:8d:92:52:f7:c0:b7:80:8a:0b:02:88:
9d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:C4:B3:39:17:81:4B:C0:0A:65:EB:9C:EC:3E:1D:FD:8D:38:30:10
X509v3 Authority Key Identifier:
keyid:DC:68:92:E3:62:0D:D0:F1:FD:62:98:2E:11:8E:29:75:7D:C8:CB:3D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/3GiS42IN0PH9YpguEY4pdX3Iyz0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3GiS42IN0PH9YpguEY4pdX3Iyz0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/3GiS42IN0PH9YpguEY4pdX3Iyz0.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cf:03:22:d8:44:34:5a:39:4c:d3:1a:57:ed:86:fb:59:48:da:
5c:54:34:4b:65:a1:a5:1e:11:1c:05:63:da:37:f9:14:ec:d2:
f9:ee:5d:1c:23:56:d6:d0:88:04:67:a5:6c:78:53:cb:d5:47:
b0:e4:f4:70:4d:1b:44:3a:28:43:e4:42:50:9b:f0:e9:e9:65:
f2:f4:48:ef:18:7c:1a:79:1b:12:9b:84:16:7d:91:03:0f:c1:
f6:8f:8e:94:5e:52:21:e9:25:f5:eb:6c:db:27:ab:2d:35:63:
41:55:7e:e7:c5:19:0c:58:e9:6e:c7:4b:e2:d2:39:d2:67:91:
c0:96:92:ea:c2:7d:bb:fb:9e:25:49:07:8a:4b:72:69:e6:19:
16:62:c1:a6:16:de:13:2c:d8:ba:24:d3:3c:86:a0:d0:4b:75:
0a:a7:27:24:80:3c:f4:3a:d8:03:af:0f:bf:f0:c1:4b:f4:cb:
b8:08:f5:a5:b6:a7:3d:09:6f:09:b8:35:4c:f6:5b:da:d3:fa:
e4:13:fb:99:ac:3b:30:25:67:75:de:fa:4c:01:3d:a2:51:30:
9b:68:d5:3b:5a:0f:35:b4:bf:2e:96:da:22:cc:2f:55:d0:fa:
ee:e8:d2:f3:44:3a:95:17:9c:ed:88:a4:c2:4c:c8:4c:d8:70:
4d:6a:e3:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:49:48 2025 by rpki-client